Re: FreeRadius (version 2.1.12) + ntlm_auth (AD) authentication + LDAP authorization

2013-01-10 Thread Phil Mayers
On 01/09/2013 08:42 PM, Matthew Ceroni wrote: It appears that when Windows sends the username it sends it as DOMAIN\\username. The \\ causes the 5c to appear in the username. I confirmed this by using the radtest tool and specifying the username as DOMAIN\\username. A single \ causes the

Re: FreeRadius (version 2.1.12) + ntlm_auth (AD) authentication + LDAP authorization

2013-01-09 Thread Phil Mayers
On 01/09/2013 12:43 AM, Matthew Ceroni wrote: Hi: I am running FreeRadius version 2.1.12 on a CentOS 6 machine. For authentication I am using AD (ntlm_auth) and this works create. In the the request the username is sent as just the plain username (ie: mceroni) and the NT-domain (ie: DOMAIN1).

Re: FreeRadius (version 2.1.12) + ntlm_auth (AD) authentication + LDAP authorization

2013-01-09 Thread Matthew Ceroni
It appears that when Windows sends the username it sends it as DOMAIN\\username. The \\ causes the 5c to appear in the username. I confirmed this by using the radtest tool and specifying the username as DOMAIN\\username. A single \ causes the username to appear as DOMAINusername so that is why

Re: FreeRadius (version 2.1.12) + ntlm_auth (AD) authentication + LDAP authorization

2013-01-09 Thread Matthew Ceroni
Phil: Thanks for the response. My understanding of what was happening with LDAP was actually incorrect. I thought it was binding as the admin DN I provided and then re-binding as the user that is trying to authenticate. The message returned was No known good password found for user. Which is just

FreeRadius (version 2.1.12) + ntlm_auth (AD) authentication + LDAP authorization

2013-01-08 Thread Matthew Ceroni
Hi: I am running FreeRadius version 2.1.12 on a CentOS 6 machine. For authentication I am using AD (ntlm_auth) and this works create. In the the request the username is sent as just the plain username (ie: mceroni) and the NT-domain (ie: DOMAIN1). And it authenticates fine. My problem is on the